Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          CXIGamSRljYCYfN0oK1/WOh9oeqrtNlB7ncDupNsKGo=
Subject key identifier:   07:17:B8:F5:81:B3:BC:80:DB:62:97:A4:6F:70:CD:29:BC:3A:3E:C6
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       01A1DCEFB4A0BD4D5C702650C48A4AA99A5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          145A
Signing time:             Sun 15 Nov 2026 02:00:59 +0000
Manifest this update:     Sun 15 Nov 2026 02:00:59 +0000
Manifest next update:     Mon 16 Nov 2026 02:00:59 +0000
Files and hashes:         1: NAKEsYWRghwxZ4iokvBSMnb-OkI.roa (hash: RPSajDNzBZ26HAPEv4AJSS0Jn24NtarM1IdT0nBivNQ=)
                          2: U-Qwz6WM_evSO89uezz5oxCn1JQ.roa (hash: nuji8CNl3iLd6E/K17ABmg8QraIShYoAsJLchecsQpQ=)
                          3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: fgIrDIzlmbbAn7kxGKx92tom5sWq/F+kBGBP0L4ko1g=)
                          4: az8-qmAm__Q2vWY0AcJPLxKPa7w.roa (hash: wZzIfzMKAO+r012Fp/hJId8drWxI5XCw8K4AvtAAvEM=)
                          5: hjkC3iRNt0avWzBUq8AMXQkI3Ac.roa (hash: FNoBVQ1K94n8J6Ws1ILAfrIE/RyDHH6bUB5I7oyTaEI=)
                          6: ii9mkf5TeDaMsZFCQ4fT-ljuTgQ.roa (hash: QvdoLk4yxysIF/RBd4WT88j/9RIybsVbv3Yb9pLmzK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:ef:b4:a0:bd:4d:5c:70:26:50:c4:8a:4a:a9:9a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Nov 15 02:00:59 2026 GMT
            Not After : Nov 16 02:00:59 2026 GMT
        Subject: CN=0717b8f581b3bc80db6297a46f70cd29bc3a3ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:08:8e:1a:57:96:0d:db:64:f5:e5:ef:52:57:
                    de:52:00:73:cd:e1:c8:aa:d2:0e:04:59:d2:5a:46:
                    0f:d3:e6:26:87:6d:ed:bb:eb:e6:8d:a9:45:53:be:
                    7a:83:86:88:a1:02:98:36:aa:27:f0:26:3a:b4:91:
                    94:ff:5f:7e:ce:e5:42:b9:c2:b4:32:98:a6:e0:9a:
                    46:1d:2e:82:22:b8:22:89:5f:d5:29:1f:02:63:4f:
                    e5:74:e4:5e:5f:1b:7d:20:c0:01:72:4b:b0:57:f1:
                    b1:1e:e9:b1:e1:44:ec:87:d9:b6:23:14:83:a2:4d:
                    14:d0:97:7e:7d:8e:8d:06:aa:43:63:87:cd:4e:91:
                    bc:38:86:86:54:99:f7:fd:5a:ea:a2:d9:57:cb:e9:
                    f8:d1:ac:2c:cf:b6:8d:71:88:69:75:76:5b:14:18:
                    42:a4:2c:13:16:ee:30:d1:0b:07:f8:35:92:4a:a3:
                    fc:b7:71:be:97:5a:08:9f:66:f5:94:30:66:d8:b7:
                    50:f3:ca:01:c5:6a:b0:ab:2e:af:3f:ef:2a:e7:db:
                    40:f2:bd:07:34:25:f2:1d:0c:7f:02:d8:52:a6:47:
                    6c:20:50:d5:4e:da:b4:a0:47:d2:27:03:c5:d9:df:
                    f3:9f:e9:da:7d:07:92:42:17:3a:14:b2:e0:02:c5:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:17:B8:F5:81:B3:BC:80:DB:62:97:A4:6F:70:CD:29:BC:3A:3E:C6
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:b8:4a:12:0e:85:be:20:fc:6c:4f:df:9e:2d:73:d6:31:
         7a:48:25:01:14:e9:11:cd:c9:d4:01:04:00:86:b7:7b:f1:4b:
         49:07:15:5f:fd:0d:1e:35:af:a4:fc:a1:8b:83:73:b8:94:c9:
         97:4c:09:b8:40:c8:64:a9:35:4f:30:24:08:d1:0f:61:c8:35:
         bd:a1:0e:05:fb:fe:44:a2:af:ab:ac:f2:bf:b5:05:95:63:cf:
         ca:e7:d1:3a:04:7b:58:56:eb:15:5d:a3:53:3c:3c:87:b7:8d:
         44:08:5c:98:ff:df:6a:1e:2c:07:03:84:6e:a5:2f:98:5f:97:
         e1:b5:a8:4e:fa:bd:0a:03:b7:f6:55:f7:bf:47:f2:16:ad:6e:
         4f:7e:11:43:c6:d8:af:5a:35:6e:ec:b7:2b:7a:d0:7f:7a:65:
         68:d8:2d:71:cc:bb:e5:db:23:fd:bf:bb:80:31:97:84:35:4b:
         30:af:84:8b:f1:c7:b5:13:09:09:f4:86:cc:6d:73:b6:52:c8:
         db:5f:5b:b6:d4:03:0b:4e:36:cc:94:d0:f3:aa:c0:0f:8a:e8:
         1b:75:aa:e1:aa:08:0a:9a:62:e7:88:cb:d3:96:c9:82:97:47:
         28:c8:e8:5a:d1:4d:02:2e:06:92:b4:10:4d:3b:d6:e1:04:56:
         51:e6:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:33 2026 by rpki-client